This release adds 4 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+4 more
Affected surfaces
Summary
AI summaryIntroduces a runtime module system with admin controls, dynamic routing, and Docker external‑module support.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | High |
Requires admin role for `PUT /api/v1/preferences` when changing `disabled_modules` Requires admin role for `PUT /api/v1/preferences` when changing `disabled_modules` Source: llm_adapter@2026-05-27 Confidence: high |
— |
| Feature | Medium |
Adds module system with runtime-loadable modules from `modules/` directory Adds module system with runtime-loadable modules from `modules/` directory Source: llm_adapter@2026-05-27 Confidence: high |
— |
| Feature | Medium |
Adds admin controls to enable/disable modules and reorder navigation menu in Settings Adds admin controls to enable/disable modules and reorder navigation menu in Settings Source: llm_adapter@2026-05-27 Confidence: high |
— |
| Feature | Medium |
Adds dynamic routing for third‑party module pages when enabled Adds dynamic routing for third‑party module pages when enabled Source: llm_adapter@2026-05-27 Confidence: high |
— |
| Feature | Medium |
Adds Docker support to mount external modules via `MODULES_DIR` environment variable Adds Docker support to mount external modules via `MODULES_DIR` environment variable Source: llm_adapter@2026-05-27 Confidence: high |
— |
| Feature | Medium |
Adds example module `pyamortiza` for Brazilian mortgage amortization calculation Adds example module `pyamortiza` for Brazilian mortgage amortization calculation Source: llm_adapter@2026-05-27 Confidence: high |
— |
| Feature | Medium |
Refactors PWA install prompt using new `pwa-install.js` utility Refactors PWA install prompt using new `pwa-install.js` utility Source: llm_adapter@2026-05-27 Confidence: high |
— |
| Bugfix | Medium |
Fixes toast type `'error'` to correct `'danger'` in Settings (CardDAV and meal types sections) Fixes toast type `'error'` to correct `'danger'` in Settings (CardDAV and meal types sections) Source: llm_adapter@2026-05-27 Confidence: high |
— |
| Bugfix | Medium |
Keeps module visible in navigation when a non‑admin user encounters a transient load error Keeps module visible in navigation when a non‑admin user encounters a transient load error Source: llm_adapter@2026-05-27 Confidence: high |
— |
Full changelog
What's new
Features
- Module system: Runtime-loadable modules with server-side discovery from the
modules/directory - Admin controls: Enable/disable modules and reorder navigation menu in Settings
- Dynamic routing: Third-party module pages load automatically when enabled
- Docker support: Mount external modules via
MODULES_DIRenvironment variable - Example module:
pyamortiza— Brazilian mortgage amortization calculator - PWA install: Refactored install prompt using new
pwa-install.jsutility
Bug fixes
- Toast type
'error'corrected to'danger'in Settings (CardDAV and meal types sections) PUT /api/v1/preferencesnow requires admin role when changingdisabled_modules- Module stays visible in navigation when a non-admin user encounters a transient load error
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Beta — feedback welcome: [email protected]